An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-29968 advisory.

  - An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks     initialization of kiocb->private. (CVE-2022-29968)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5471-1 advisory.

    It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when     booted in secure boot environments. A privileged attacker could use this to bypass UEFI Secure Boot     restrictions. (CVE-2022-21499)

    Aaron Adams discovered that the netfilter subsystem in the Linux kernel did not properly handle the     removal of stateful expressions in some situations, leading to a use-after-free vulnerability. A local     attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
    (CVE-2022-1966)

    Moshe Kol, Amit Klein and Yossi Gilad discovered that the IP implementation in the Linux kernel did not     provide sufficient randomization when calculating port offsets. An attacker could possibly use this to     expose sensitive information. (CVE-2022-1012)

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux     kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a     denial of service (system crash). (CVE-2022-1205)

    It was discovered that the Marvell NFC device driver implementation in the Linux kernel did not properly     perform memory cleanup operations in some situations, leading to a use-after-free vulnerability. A local     attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code.
    (CVE-2022-1734)

    Minh Yuan discovered that the floppy driver in the Linux kernel contained a race condition in some     situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-1836)

    Ziming Zhang discovered that the netfilter subsystem in the Linux kernel did not properly validate sets     with multiple ranged fields. A local attacker could use this to cause a denial of service or execute     arbitrary code. (CVE-2022-1972)

    Joseph Ravichandran and Michael Wang discovered that the io_uring subsystem in the Linux kernel did not     properly initialize data in some situations. A local attacker could use this to expose sensitive     information (kernel memory). (CVE-2022-29968)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
173495	CBL Mariner 2.0 Security Update: kernel (CVE-2022-29968)	Nessus	MarinerOS Local Security Checks	high
161958	Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5471-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2022-29968

high

Tenable Plugins

high

high